7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk.
Basic Information
ID
CVE-2025-14812
Source
BCNY
Published
Dec 19, 2025 at 16:38
Modified
Dec 19, 2025 at 16:50
Affected Product
Vendor
The Browser Company of New York
Product
ArcSearch
Affected Versions
The Browser Company of New York ArcSearch 0